By default, 3com OfficeConnect VPN Firewall installs with default user credentials (username/password combination). The Web Interface has a password of 'admin', which is publicly known and documented. This allows remote attackers to trivially access the program or system and gain privileged access.